How these usually begin
An inquiry can grow out of an examination, a complaint, a tip from a former employee, a filing that did not reconcile, or trading patterns picked up by surveillance. Early on the requests are often framed as voluntary, and many people answer them the way they would answer any business correspondence. Later stages can involve subpoenas for records and testimony under oath. Receiving a request does not tell you where you stand, because the same letter goes to subjects, to companies holding records, and to witnesses who are simply nearby. Working out which of those you are is the first useful thing to do, and it is usually possible to find out.
Preservation comes before any response
Before drafting anything, stop automatic deletion. That means email retention settings, chat and messaging applications, voicemail, calendars, shared drives, and any personal phone or account that has been used for work, which is where most gaps appear. Circulate a written hold so people are not deciding individually what matters. Deleting, editing, or tidying material after a request arrives is the single thing most likely to turn a survivable inquiry into a separate and worse problem, and modern systems record the change. It is also wise not to compare notes with others who received requests, however natural that feels.
Parallel tracks, and who represents whom
A securities matter can run alongside an internal review by your employer, an inquiry by a self-regulatory body, a private lawsuit, and in some matters a criminal referral. These move on different timelines and what helps in one can hurt in another. If the company has put counsel in the room, that lawyer represents the company, even when the introduction came from your manager. In a first conversation we look at what has been asked for, what your role in the underlying events actually was, whether the company's governing documents address advancement of legal fees, and how to respond in a way that does not foreclose the other tracks.